Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/f9aBoBbrqrdOcf-TKy4tnJVUFjs.roa
File: f9aBoBbrqrdOcf-TKy4tnJVUFjs.roa (raw, json)
Hash identifier: iVLCxET4rDvpD/3jAv1vo99+Y0zsWO13/Rbx8bnA6a4=
Subject key identifier: 7F:D6:81:A0:16:EB:AA:B7:4E:71:FF:93:2B:2E:2D:9C:95:54:16:3B
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 01A181116F367358CA56E2384E430782743D
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/f9aBoBbrqrdOcf-TKy4tnJVUFjs.roa
Signing time: Wed 28 Oct 2026 05:52:45 +0000
ROA not before: Wed 28 Oct 2026 05:52:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152726
IP address blocks: 92.50.0.0/24 maxlen: 24
185.101.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:11:6f:36:73:58:ca:56:e2:38:4e:43:07:82:74:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Oct 28 05:52:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7fd681a016ebaab74e71ff932b2e2d9c9554163b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:73:f1:5b:e2:77:a3:4e:e0:71:f8:0a:fb:d7:
19:22:cb:6b:fe:d6:60:07:86:b4:4f:31:f8:dd:88:
46:e0:a9:77:ae:56:74:fc:ae:55:3e:b9:51:08:cb:
02:f5:f9:27:61:d6:01:7b:25:ba:eb:d9:66:ef:db:
31:e8:88:0e:1d:6b:29:e8:25:44:7f:bd:08:30:81:
3d:3b:b5:fa:04:0a:27:5a:75:16:d6:75:d0:0d:2d:
dd:aa:aa:4e:7c:4b:7b:a4:dc:0e:18:9d:71:5c:1d:
d6:8e:3e:14:85:fb:ca:4d:95:5a:ee:3f:dd:64:90:
cc:96:34:3d:8c:6b:eb:b3:90:93:7f:05:ed:c4:0d:
08:95:48:fc:eb:9a:03:cb:7a:e9:ab:86:33:44:09:
69:e5:1f:3c:44:b0:2b:4b:14:d5:37:f5:ce:7c:10:
39:1e:c9:8a:68:7a:aa:65:75:06:4f:05:16:0e:80:
aa:1b:79:96:2a:4f:a8:d7:c7:51:e6:d9:27:6e:fa:
27:9a:73:12:c1:15:14:ea:bd:03:f6:e7:ec:fb:9a:
1b:ec:1c:15:b6:d7:3a:20:d9:d5:5f:b7:88:80:97:
02:7b:7a:f5:50:78:93:7a:dc:f7:ce:92:20:6d:36:
bd:90:92:70:c4:86:7d:ab:c3:61:f0:37:06:9a:30:
a1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D6:81:A0:16:EB:AA:B7:4E:71:FF:93:2B:2E:2D:9C:95:54:16:3B
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/f9aBoBbrqrdOcf-TKy4tnJVUFjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.50.0.0/24
185.101.244.0/24
Signature Algorithm: sha256WithRSAEncryption
53:e0:9c:1b:3b:c9:a4:91:65:7e:36:b5:5c:6a:28:de:5f:70:
3b:04:c8:01:d9:8e:96:15:ba:cf:28:4f:38:66:ea:9b:89:d2:
11:02:6d:78:58:b4:64:c2:be:65:2b:81:61:87:2e:13:36:de:
2a:53:b9:03:c2:3c:0b:98:a3:f0:53:b8:9b:85:f8:5e:e0:cf:
e5:75:7b:88:b5:aa:27:17:30:c0:f2:a9:9e:99:ed:76:94:ca:
1b:ab:f4:af:cb:c1:27:4d:28:44:d8:5d:02:8c:15:44:17:44:
0e:de:91:4f:69:5d:57:00:69:9b:48:10:59:5f:b0:36:d9:24:
59:76:90:1f:2e:e5:bc:88:ee:c5:2d:7b:ff:8f:c4:a0:1f:3e:
c7:de:91:25:66:a1:7a:4e:84:22:4b:a3:86:e9:0d:5e:52:c7:
c5:4c:17:5e:0d:d1:75:dc:a2:07:bd:26:3e:14:6d:9a:10:62:
e5:d6:07:7a:b6:f8:10:15:89:0d:b3:69:04:10:8a:a7:d4:6a:
d5:ba:b5:0f:cb:a0:c1:3e:13:bf:95:3e:fb:fe:4f:d0:9a:4e:
21:13:ca:eb:7b:96:a1:de:27:80:1c:57:9b:44:4a:ee:8b:6f:
68:7b:75:1e:85:20:54:74:c2:0d:5b:6b:5a:44:71:47:2a:3c:
20:fa:95:57
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaGBEW82c1jKVuI4TkMHgnQ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNjYwNWI0ZDI3ZjEzOTY4ZTg3OTRlNmVmMDkxMjIzNzQ4
ODE3ZDgwHhcNMjYxMDI4MDU1MjQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmQ2ODFhMDE2ZWJhYWI3NGU3MWZmOTMyYjJlMmQ5Yzk1NTQxNjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HPxW+J3o07gcfgK+9cZIstr/tZg
B4a0TzH43YhG4Kl3rlZ0/K5VPrlRCMsC9fknYdYBeyW669lm79sx6IgOHWsp6CVE
f70IMIE9O7X6BAonWnUW1nXQDS3dqqpOfEt7pNwOGJ1xXB3Wjj4UhfvKTZVa7j/d
ZJDMljQ9jGvrs5CTfwXtxA0IlUj865oDy3rpq4YzRAlp5R88RLArSxTVN/XOfBA5
HsmKaHqqZXUGTwUWDoCqG3mWKk+o18dR5tknbvonmnMSwRUU6r0D9ufs+5ob7BwV
ttc6INnVX7eIgJcCe3r1UHiTetz3zpIgbTa9kJJwxIZ9q8Nh8DcGmjChkwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFH/WgaAW66q3TnH/kysuLZyVVBY7MB8GA1UdIwQY
MBaAFIJmBbTSfxOWjoeU5u8JEiN0iBfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEt
MmQxOTE4YmExYzBlLzEvZjlhQm9CYnJxcmRPY2YtVEt5NHRuSlZVRmpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEtMmQxOTE4YmExYzBl
LzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXDIAAwQA
uWX0MA0GCSqGSIb3DQEBCwUAA4IBAQBT4JwbO8mkkWV+NrVcaijeX3A7BMgB2Y6W
FbrPKE84ZuqbidIRAm14WLRkwr5lK4Fhhy4TNt4qU7kDwjwLmKPwU7ibhfhe4M/l
dXuItaonFzDA8qmeme12lMobq/Svy8EnTShE2F0CjBVEF0QO3pFPaV1XAGmbSBBZ
X7A22SRZdpAfLuW8iO7FLXv/j8SgHz7H3pElZqF6ToQiS6OG6Q1eUsfFTBdeDdF1
3KIHvSY+FG2aEGLl1gd6tvgQFYkNs2kEEIqn1GrVurUPy6DBPhO/lT77/k/Qmk4h
E8rre5ah3ieAHFebRErui29oe3UehSBUdMINW2taRHFHKjwg+pVX
-----END CERTIFICATE-----
Generated at Sat Oct 31 08:37:31 2026 by rpki-client